feat: v1.8.0 release

[cody-rester]

Description

Platform Atlas v1.8.0 — a minor, backwards-compatible feature release for the CLI / core package. Adds a diagnostic support-bundle workflow, in-product ruleset updates, per-environment rule suppression, resumable captures, architecture discovery warnings, and expanded Kubernetes coverage. Requires no migration; existing sessions, environments, and rulesets continue to work.

Type of Change

• New feature

Changes Made

• support-bundle command — collects a diagnostic ZIP (Platform health endpoints + redacted config; Extended adds SSH logs + system info) with an interactive wizard. The wizard now prompts for the log window (1–30 days, default 7, Extended only), and a credential pre-flight verifies the active backend (Vault or OS keyring) can actually produce the Platform OAuth secret — aborting before writing an empty bundle if it can't.
• ruleset update command + CLI dashboard update notice — fetches a versioned manifest, SHA-256 verifies, and writes updates atomically.
• Per-environment rule suppression (ruleset skip-rule / unskip-rule) with a required justification reason, surfaced in reports and the WebUI ruleset table.
• Resume interrupted captures — collector results are checkpointed to 00_checkpoint.json; re-running capture after a Ctrl-C / drop offers to resume.
• Architecture discovery warnings — cross-DC latency, single-node availability risk, and cloud cross-region MongoDB, rendered in the architecture report and WebUI.
• Expanded Kubernetes capture + 11 new compliance rules (KBS-005–KBS-015; KBS-001–004 enabled) covering probes, resource requests/limits, restart counts, HPA, and node info.
• ControlMaster socket preflight + session reminder panel before capture.
• Versioned ruleset manifest committed for v1.8.0; CHANGELOG updated (Keep a Changelog).

Testing

• Added unit tests for the support-bundle credential pre-flight gate (tests/test_support_bundle.py) — all passing.
• pylint on changed handler clean (9.85/10, only pre-existing project-wide disables).
• CLI smoke-tested (support-bundle --help); ruleset manifest builder run and confirmed idempotent for v1.8.0.
• Note: the broader test suite has some pre-existing, unrelated failures (missing conftest fixtures) not introduced by this release; tracked separately.

Checklist

• Code follows the project's style guidelines
• Self-review of code has been performed
• Code has been commented where necessary
• Tested with make setup or relevant profile
• Commits follow conventional format (type: subject)
• No secrets or credentials committed
• Documentation has been updated accordingly
• PR has been labeled appropriately (enhancement)